BS ISO IEC 11770-2-2008 Information technology - Security techniques - Key management - Mechanisms using symmetric techniques《信息技术 安全技术 密钥管理 对称技术机制》.pdf
《BS ISO IEC 11770-2-2008 Information technology - Security techniques - Key management - Mechanisms using symmetric techniques《信息技术 安全技术 密钥管理 对称技术机制》.pdf》由会员分享,可在线阅读,更多相关《BS ISO IEC 11770-2-2008 Information technology - Security techniques - Key management - Mechanisms using symmetric techniques《信息技术 安全技术 密钥管理 对称技术机制》.pdf(34页珍藏版)》请在麦多课文档分享上搜索。
1、BRITISH STANDARD BS ISO/IEC 11770-2:2008 Information technology Security techniques Key management Part 2: Mechanisms using symmetric techniques ICS 35.040 Incorporating corrigendum September 2009National foreword This British Standard is the UK implementation of ISO/IEC 11770-2:2008, incorporating
2、corrigendum September 2009. The start and finish of text introduced or altered by corrigendum is indicated in the text by tags. Text altered by ISO/IEC corrigendum September 2009 is indicated in the text by . The UK participation in its preparation was entrusted to Technical Committee IST/33, IT Sec
3、urity techniques. A list of organizations represented on this committee can be obtained on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. Compliance with a British Standard cannot c
4、onfer immunity from legal obligations. BS ISO/IEC 11770-2:2008 This British Standard was published under the authority of the Standards Policy and Strategy Committee on 31 July 2008 BSI 2010 Amendments/corrigenda issued since publication Date Comments 31 August 2010 Implementation of ISO/IEC corrige
5、ndum September 2009 ISBN 978 0 580 68076 2 Reference number ISO/IEC 11770-2:2008(E)INTERNATIONAL STANDARD ISO/IEC 11770-2 Second edition 2008-06-15 Information technology Security techniques Key management Part 2: Mechanisms using symmetric techniquesii iii Contents Page Foreword iv 1 Scope . 1 2 No
6、rmative references . 1 3 Terms and definitions. 2 4 Symbols and abbreviated terms . 3 5 Requirements 4 6 Point-to-point key establishment 5 6.1 Key Establishment Mechanism 1 5 6.2 Key Establishment Mechanism 2 5 6.3 Key Establishment Mechanism 3 6 6.4 Key Establishment Mechanism 4 7 6.5 Key Establis
7、hment Mechanism 5 7 6.6 Key Establishment Mechanism 6 8 7 Mechanisms using a Key Distribution Centre . 9 7.1 Key Establishment Mechanism 7 10 7.2 Key Establishment Mechanism 8 11 7.3 Key Establishment Mechanism 9 12 7.4 Key Establishment Mechanism 10 14 8 Mechanisms using a Key Translation Centre 15
8、 8.1 Key Establishment Mechanism 11 16 8.2 Key Establishment Mechanism 12 16 8.3 Key Establishment Mechanism 13 18 Annex A (normative) ASN.1 module. 21 Annex B (informative) Properties of key establishment mechanisms 23 Annex C (informative) Auxiliary techniques 25 Bibliography . 27 BS ISO/IEC 11770
9、-2:2008 ISO/IEC 11770-2:2008 (E)iv Foreword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of Int
10、ernational Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liais
11、on with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint techn
12、ical committee is to prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is d
13、rawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 11770-2 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommitt
14、ee SC 27, IT Security techniques. This second edition cancels and replaces the first edition (ISO/IEC 11770-2:1996), which has been technically revised. It also incorporates the Technical Corrigendum ISO/IEC 11770-2:1996/Cor.1:2005. ISO/IEC 11770 consists of the following parts, under the general ti
15、tle Information technology Security techniques Key management: Part 1: Framework Part 2: Mechanisms using symmetric techniques Part 3: Mechanisms using asymmetric techniques Part 4: Mechanisms based on weak secrets BS ISO/IEC 11770-2:2008 ISO/IEC 11770-2:2008 (E)1 Information technology Security tec
16、hniques Key management Part 2: Mechanisms using symmetric techniques 1 Scope The purpose of key management is to provide procedures for handling cryptographic keying material to be used in symmetric or asymmetric cryptographic algorithms according to the security policy in force. This part of ISO/IE
17、C 11770 defines key establishment mechanisms using symmetric cryptographic techniques. Key establishment mechanisms using symmetric cryptographic techniques can be derived from the entity authentication mechanisms of ISO/IEC 9798-2 and ISO/IEC 9798-4 by specifying the use of text fields available in
18、 those mechanisms. Other key establishment mechanisms exist for specific environments; see, for example, ISO 8732. Besides key establishment, the goals of such a mechanism might include unilateral or mutual authentication of the communicating entities. Further goals might be the verification of the
19、integrity of the established key, or key confirmation. This part of ISO/IEC 11770 addresses three environments for the establishment of keys: Point-to-Point, Key Distribution Centre (KDC), and Key Translation Centre (KTC). This part of ISO/IEC 11770 describes the required content of messages which c
20、arry keying material or are necessary to set up the conditions under which the keying material can be established. It does not indicate other information which can be contained in the messages or specify other messages such as error messages. The explicit format of messages is not within the scope o
21、f this part of ISO/IEC 11770. This part of ISO/IEC 11770 does not specify the means to be used to establish initial secret keys; that is, all the mechanisms specified in this part of ISO/IEC 11770 require an entity to share a secret key with at least one other entity (e.g. a TTP). For general guidan
22、ce on the key lifecycle see ISO/IEC 11770-1. This part of ISO/IEC 11770 does not explicitly address the issue of interdomain key management. This part of ISO/IEC 11770 also does not define the implementation of key management mechanisms; products complying with this part of ISO/IEC 11770 might not b
23、e compatible. 2 Normative references The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 1177
24、0-1, Information technology Security techniques Key management Part 1: Framework BS ISO/IEC 11770-2:2008 ISO/IEC 11770-2:2008 (E)2 3 Terms and definitions For the purposes of this document, the terms and definitions given in ISO/IEC 11770-1 and the following apply. 3.1 distinguishing identifier info
- 1.请仔细阅读文档,确保文档完整性,对于不预览、不比对内容而直接下载带来的问题本站不予受理。
- 2.下载的文档,不会出现我们的网址水印。
- 3、该文档所得收入(下载+内容+预览)归上传者、原创作者;如果您是本文档原作者,请点此认领!既往收益都归您。
下载文档到电脑,查找使用更方便
5000 积分 0人已下载
下载 | 加入VIP,交流精品资源 |
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- BSISOIEC1177022008INFORMATIONTECHNOLOGYSECURITYTECHNIQUESKEYMANAGEMENTMECHANISMSUSINGSYMMETRICTECHNIQUES

链接地址:http://www.mydoc123.com/p-396251.html